Information Security Engineer II

Qualifications

• Bachelor's degree in computer science, IT, Cybersecurity, or related field (or equivalent experience).
• 3+ years in security operations or cybersecurity roles.
• 2+ years of hands-on experience with SIEM and EDR technologies.
• Fundamental understanding of SIEM technologies and security analytics.
• Experience conducting incident response investigations.
• Familiarity with scripting languages like Python, PowerShell, or Bash is a plus.
• Knowledge of MITRE ATT&CK framework and threat intelligence concepts.
• Security certifications such as Splunk Certified Power User, CISSP, CEH, or Security+ are a plus.
• Ability to work independently and collaboratively in a fast-paced environment.

Responsibilities

• Analyze security event data to identify potential threats and vulnerabilities.
• Triage, investigate, and respond to alerts and security incidents, coordinating with teams and stakeholders.
• Develop and implement incident response plans, playbooks, and procedures.
• Contribute to detection efforts by creating requests for new detections and tuning existing ones.
• Assist the Incident Response Lead in coordinating with Managed Security Service Providers and forensics resources.
• Continuously monitor Splunk for security events and resolve incidents, creating new alerts as needed.
• Create Splunk searches to identify the latest threats and risks, engaging in threat hunting.

Benefits

• Opportunity to work with cutting-edge security technologies.
• Collaborative work environment with a focus on continuous learning.
• Support for professional development and certifications.
• Engagement with a diverse range of security incidents and challenges.